skills/kaizen2026/universal-agent-skills/code-review/Socket

code-review

Warn

Audited by Socket on Aug 11, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the core review purpose is coherent with local git/file inspection, but the skill expands its footprint by invoking unverified slash-command skills with unclear provenance. The main risk is transitive trust and prompt-injection exposure from broad repo content, not direct malware behavior or explicit credential theft.

Confidence: 82%Severity: 64%

Audit Metadata

Analyzed At

Aug 11, 2026, 08:58 AM

Package URL

pkg:socket/skills-sh/kaizen2026%2Funiversal-agent-skills%2Fcode-review%2F@1789c239d14c9743fc4c6c2762def70d5e15b47254c6c4e2ecb52c6c7efd7e55